Returning Candidate?

AWS Security Assurance Analyst

AWS Security Assurance Analyst

Job ID 
Posted Date 
Amazon Web Services, Inc.
Position Category 
Project/Program/Product Management--Technical
Recruiting Team 

Job Description

Amazon Web Services (AWS) is rapidly expanding its global presence. AWS adheres to multiple compliance frameworks by strategically implementing new IT processes and product security features to accommodate the requirements and to expand our global customer base. AWS is looking for an AWS Security Assurance analyst with a security, risk, and compliance background to be part of a process improvement team. As part of the AWS Security Assurance team, the candidate is a key liaison with AWS service teams, infrastructure teams, AWS Security, and related Amazon corporate teams. This candidate should be a technically experienced and innovative security/compliance professional who has the ability to understand IT processes and to be able to drive innovative process changes through multiple organizations and teams.

Key Responsibilities
This position will be responsible for the following activities:
- Improve program documentation, identify enhancement opportunities, coordinate improvement efforts, and monitor process improvement effectiveness.
- Develop a working knowledge of the operational processes and controls in place supporting all compliance programs.
- Assist with linking policy, standard operating procedures, controls, monitoring, and reporting with the goal of improving operations, compliance policies, and risk management.
- Drive process improvement and control implementation projects in coordination with the service teams. This includes execution of projects originated from internal assessments.
- Analyze control readiness for audit and/or certification. Assist in documenting and communicating control environment operation, improvement priorities, and design effectiveness.

Basic Qualifications

The requirements listed below are representative of the knowledge, skill, and/or ability required:
- Bachelor's Degree in Information Systems Management, Informatics, Political Science, Accounting/Auditing, or other related fields.
- Minimum 2 years of experience in security or compliance consulting or advisory work in in support of a highly technical environment.
- Experience in performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. PCI, SOC1, SOC2, or ISO 27001).

Preferred Qualifications

- Work ethic based on a strong desire to exceed expectations with enthusiasm. Experience working successfully in a very fast-paced, results-oriented environment. Hands-on and flexible.
- Have a record of delivering detailed analysis and process improvement projects with major tech companies and/or financial institutions. Experience with IT or financial compliance consulting is a plus.
- Have experience in generating automated metrics to measure process effectiveness and consistency.
- Have a clear understanding of cloud computing services/deployment architecture.
- Experience in compliance program or project management, auditing, and/or control framework development, implementation, validation, and assessment. Experience driving assessment of IT and/or financial services compliance programs.
- Have experience in performing technical assessments and audits of compliance control frameworks, particularly IT processes. Experience with transaction processing environments is a plus.
- Have a working knowledge of SOC, PCI DSS, and ISO standards. Have an understanding of evaluating and evidencing the design and effectiveness of compliance controls.
- Demonstrate clear and concise written and verbal communication ability.

Amazon is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation.

**For additional information or to send your resume directly, please email